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BACKGROUND OF THE INVENTION 

fOOOn A storage system is connected to at least one host computer and has a 
plurality of logical units thereinside. Further, the external storage system includes 
at least one or plural disk devices. The storage system and the host computer 
constitute a computer system. They are connected using an SCSI. Even in the 
case of a Fibre Channel or the like using no SCSI interface, a logical interface is^ 
th emav be SCSI. 

[00021 Such an external storage system in current use has coupling functions 
and is capable of copying logical units (LUs) between the present system and 
another external storage system. These coupling functions include a plurality of 
coupling operations. Commands for giving instructions for the respective 
operations are prepared. These coupling operations have been normally 
executed according to issuance of their corresponding commands from dedicated 
terminals. However, a method using command devices was -has also been 
considered as a method of directly executing coupling operations from a host 
computer. The host computer issues commands for performing the coupling 
operations to the command devices as data to be written into the external storage 
system. The command devices are shared logical units exclusively used for 
communication with the host computer. The host computer writes the commands 
into the dedicated command devices as data, whereas the external storage 
system processes the data written into the command devices as commands. 
Such coupling-operation instructions made from the host computer is-are 
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executed by writing the commands into their corresponding command devices 
through an operation application (hereinafter abbreviated as RM) or an operation 
API (hereinafter abbreviated as RMLIB) on the host computer. The host computer 
is capable of giving instructions for the coupling operations from the command 
devices to all the logical units lying within the external storage system. 
[00031 Meanwhile, if the instructions is -are w ritten into the command devices, 
then they can be issued to all the logical units in the external storage system in the 
above related art. However, the following problems arise in reverse due to it. 
[00041 While the external storage system can be connected to a plurality of host 
computers, accessible logical units are restricted for every host 
compute r computors . It is thus necessary to limit instructions for coupling 
operations from a given host computer only to logical units tr e atab le accessible bv 
the host computer. However, since the application on the conventional host 
computer is not provided with means for confirming whether a logical unit to be 
operated corresponds to the logical unit to be actually operated, which has been 
handled by the host computer, there is a possibility that the host computer will 
gjvef HCiive instructions to a logical unit handled by another host computer, thus 
resulting in data corruption. 

[00051 Connections of the logical units have heretofore been performed by 
confirming to which connection port the host computer is physically connected, 
confirming by means of a service processor^ or the like^ i n what t he_configuration 
in which the host computer is connected, and manually developing the result 
thereof to a defined file on the host computer. Therefore, the possibility that data 
corruption will occur due to typing errors of a supervisor, still remains. 
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[00061 Therefore, a specific group, which makes use of a system (hereinafter 
called LUN security) implemented by Japanese Patent Application Laid-Open No. 
2000-322369 at present^ and which comprises a set of logical units in an external 
storage system, can be set so as to be recognized only by a specific Fibre 
Channel Port of a host computer. Further, the LUN security is extended even to 
command devices, and only command devices that belong to the same group, are 
applied so as to be able to operate their corresponding logical units. 
[0007] Thus, when only one Fibre Channel Port is used in the host computer, the 
group of logical units recognized by the host computer is one, and all the logical 
units recognized by the host computer belong to one group. Therefore, the host 
computer is capable of operating all the logical units through the use of command 
devices that belong to the group. 

SUMMARY OF THE INVENTION 

fOOOSl However, the current LUN security is used not only in security applications 
but also in svyitching between alternate paths. It is therefore necessary to define it 
as a group 1 : WWN-A (World Wide Name corresponding to an address inherent in 
Fibre Channel Port is hereinafter abbreviated as WWN) and a group 2: WWN-B 
from the relationship of the alternate paths. 

[0009] Thus, when the LUN security is m-no -not in use, command devices that 
belong to the group of WWN-A, can be used with command devices that belong to 
WWN-B as their alternatives. However, when the LUN security is used, the 
command devices that belong to group 2: WWN-B. allow the group 1 : WWN-A 
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(i.e., the different if^-group) to disappear from view. Therefore, it is not possible to 
use them as th ei r alternate command devices. 

[00101 When the security is defined as a group 1 : WWN-A and a group 2: 
WWN-B from the relationship of path definition as shown in FIG. 2 and command 
devices are placed on another port, the host computer is capable of recognizing 
two command devices and two volumes. However, the relationship between the 
respective command devices and controllable volumes is not understood or 
recognized unless WWNs of the host computer are recognized. 
room Therefore, when the LUN security is used, sueh -there exists a case that 
the recognized command devices cannot necessarily operate the logical units 
recognized from the host computer side , e xists . 

[00121 On the other hand, the current LUN security is -mav also be used even f or 
path control under a Fibre-Switch environment , and thus.- evef h for other than the 
original purpose of security. This means that the LUN security function is no more 
than logic path setting. Using this function and applying it to security for each 
command device yields execution of security by the logic path setting alone, ttws 
which can cause causing inconvenience. 

[00131 An object of the present invention is to propose an additional mechanism 
necessary for an external storage system and an additional process for an 
application of each ef-host comput e rs computer in order to, in a computer system 
in which a plurality of the host computers share the use of one or plural disk 
devices, limit control eft-of logical units from each of the host computers to logical 
units recognized by the host computer, and allow the logical units recognized by 
the host computer to operate without restrictions. 
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[0014] To this end, the external storage system is configured so as to provide 
extended ijnquiry information for specifying each logical unit for the host 
computer. 

[0015] The external storage system according to the present invention 
comprises one or plural disk array controllers and a plurality of hard disk drives. 
Logical units having no relevance to a plurality of physical hard disk drives are 
virtually defined. The host computer is capable of recognizing the logical units as 
the hard disk drives and using the same. 

[0016] Now aA t least one of the logical units is dedicated for coupling control and 
is distinguished from logical units read and written or programmed from and to a 
normal host. A host program for controlling coupling issues coupling control 
according to the reading and writing from and to the logical unit (command device) 
dedicated for the coupling control. The host computers are also capable of using 
the control-dedicated logical unit (command device) with b ei ng shared taking 
place between other ports. When discrete groups share the use of one logical unit 
at this time, they function as command devices independent of each host 
computer. 

[00171 Now the external storage system according to the invention of the present 
application defines extended LU numbers (LUNs) as management information on 
logical units as viewed from outside in order to achieve the object of the invention 
of the present application that each of the host computers can specify logical 
units. 

[0018] The extended LU number comprises a combination of a connection port, 
a target ID and a logical unit number. Thus, the>a_mechanism that -wherebv t he 
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host computer is capable of specifying the logical units, is constructed. An 
extended logical unit number storage unit for obtaining correspondence between 
the extended LU numbers and the logical units is made up of a CPU and a built-in 
memory. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[00191 Fig. 1 is a diagram showing an external storage system according to a first 

embodiment of the present invention and a host computer; 

[00201 Fig. 2 is a diagram illustrating an external storage system according to a 

second embodiment of the present invention and a host computer; and 

[00211 Fig. 3 is a diagram depicting one example of a list on an RM according to 

the present invention. 

DESCRIPTION OF THE PREFERRED EMBODIMENTS 

[00221 A first embodiment of the present invention wilt be explained using Fig. 1 . 
Fig. 1 is a system configurational diagram of a computer system comprising a host 
computer and an external storage system of the present invention. A host 
computer 100 and an external storage system 200 are connected to each other by 
a physical interface used as a Fibre Channel and a logic interface used as an 
SCSI. The host computer 100 brings adapters 120 and 121 having WWN (World 
Wide Name) of a WWN-a and a WWN-b into connection with adapters 210. 211 . 
[00231 Logical units 240, 241 , 242 and 243 exist within the external storage 
system. I/O and coupling operations are carried out in units of such logical units. 
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CPUs 220 and 221 lying within the external storage systenn interpret and execute 
SCSI commands in the units of the logical units. 

[00241 It is possible to allow each of the logical units to have a function for the 
coupling operation. The logical unit having such a function is called a command 
device (CM s 230, 231 ) and is capable of receiving read and write (R/W) accesses 
from the host compute r 100 . The logical units can be shared between a plurality 
of ports. In the logical units 242 and 243, for example, the same logical units are 
shared between a plurality of ports and respectively viewed as discrete logical 
units from the host side. The CMs 230 and 231 are also similar and respectively 
seen as discrete CMs from the host computer. 

f00251 A RM 110 (operation application) for controlling the coupling operation^ 
and an application 101 for giving instructions to the RM 110 are in operation on the 
host computer 1 00. The host computer reads and writes the contents of control 
from and to the CMs 230 and 231 set within the external storage system 200 via 
the RM 110, thereby executing the coupling operation. The host compute r 100 is 
capable of executing the coupling operation only via the RM 110. 
[00261 The external storage system 200 interprets thore i ns i do the contents of 
data written into the CPUs 220 and 221 and executes a coupling operation 
corresponding to the contents. Logical unit information specified to the coupling 
operation in this case takos th e syst e m of b e ing is,managed within the external 
storage svstem 200 . This is not information managed by the host computer 100. 
In the case of UNIX, for example, the application 101 of the host computer 100 
effects reading/writing on each logical unit according to a R/\N access to a special 
device file. There is thus no method of directly recognizing the correspondence 
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between the special device file and the information (connection port numbers, 
target IDs and LU numbers) managed within the external storage system through 
the use of the host computer. Accordingly, there was a need to acquire the 
information managed within the external storage system 200 by a method such as 
confirmation thereof by an SVP (service processor) upon execution of the 
coupling operation. In the present invention, the external storage system 200 
adds each of extended LU numbers used in coupling to a response of an linquiry 
command to a specified logical unit. 

f00271 Owing to such addition, the host computer 100 is capable of collecting 
responses of linquiry commands to special device files of all storage systems 
recognized by the host computer 100. It is thus possible to obtain a list 111 of 
extended LU numbers corresponding to all logical units recognized by the host 
computer. Fig. 3 shows an embodiment of a list. The operation thereof can also 
be carried out through the use of device special files by bringing the device special 
files into correspondence with (port numbers, target IDs and LU numbers). 
Refusal of RM to a request of a coupling operation to other than the extended LU 
numbers on the list 111 makes it possible to inhibit the operation for each logical 
unit non handl e d by not handled by t he host computer 100. 
[00281 Fig. 1 is an embodiment showing a case illustrative of alternate or switch 
paths described in tho paragraph of tho prob l ems above . When LUN security is 
used, access to the CM 230 is made through the adapter 120, thereby making it 
possible to carry out operation for the LU 242 in a group 250 . However, when the 
adapter 121 is used as the alternate path due to a failure in the adapter 120, only 
access to the CM 231 is allowed through the adapter 121 . Therefore, the 
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operation for the LU 242 results in an operation to the LU of another group 251 
and is hence refused. However, since the groups 250, 251 set in adapter units like 
the LUN security are not used owing to the use of the present invention, the 
operation for the LU 242 as viewed from the CM 231 at path alternation can be 
executed without a_refusal to its operation. 

[00291 In such a cas e another embodiment, as shown in Fig. 2. LUs 240 and 241 
and CMS 230 and 231 are recognized by a host computer 100. When the LUN 
security is used, the CM 230 is capable of operating only the LU 240, and the CM 
231 is capable of operating only the LU 241 . However, the host computer is 
unable to recognize whether or not they are capable of operation, unless their 
operations are actually executed. Owing to the use of the present invention, 
however, the host computer 100 is capable of operating only the recognizable LUs 
240 and 241 . and both the CMs 230 and 231 are capable of operating the LUs 240 
and 241. 

[00301 Therefore, only the LUs recognized by the host computer can be operated 
w i thout miss i ng oporat i ona li ty as viewed from the host computer side, whereby 
security to the operation is enhanced. 

[00311 According to the present invention, since only the logical units recognized 
by the host computer are capable of performing coupling operations, security is 
enhanced. Further, since the logical units are recognized without depending on 
the configurations of the adapters , and can thereby be operated, availability of the 
system is enhanced. 



